CVE Catalog

CVE-2016-7938

Critical
Published: Translated: NVD NIST

Summary

The ZeroMQ parser in tcpdump before version 4.9.0 has an integer overflow in the zmtp1_print_frame() function.

Risk Assessment

The integer overflow may lead to unexpected program behavior, which could be exploited by an attacker to execute malicious code.

Recommendation

It is recommended to update tcpdump to version 4.9.0 or later to mitigate this vulnerability.

Original NVD description (English source)

The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1_print_frame().

Vulnerability data from NVD (NIST) · CISA KEV · EPSS